---
title: "Privacy Policy"
description: "QWED Privacy Policy - learn how we handle, protect, and process data for AI verification, including retention and deployment options."
url: https://qwedai.tech/privacy
---

# Privacy Policy

Last updated: October 13, 2026

## 1\. Data Collection

We minimize data collection to the absolute essentials required for service delivery:

-   **GitHub Metadata:** Repository names, PR numbers, commit hashes, and installation identifiers.
-   **Source Code:** Ephemerally processed for verification (AST analysis, math validation, security scanning). **It is never stored.** Code is loaded into volatile memory, analyzed, and immediately discarded.
-   **Payment Info:** None. QWED Security is free on GitHub Marketplace, and we never collect payment or billing details.
-   **Analytics:** Only if you accept analytics cookies on our website, we use Google Analytics (via Google Tag Manager) to collect anonymized usage data including page views, session duration, and general browser/device type. No personally identifiable information is collected through analytics.
-   **Email:** If you email us, we use your address and message only to reply.

## 2\. Third-Party Services

QWED Security does not send source code to third-party AI providers. Scans run deterministic parsers, taint analysis, and policy rules; no language model is in the decision path.

The QWED Security app runs on Google Cloud (Cloud Run), which processes the webhook and API traffic needed to scan a pull request.

On our website:

-   **Google Tag Manager** and **Google Analytics** collect anonymized usage analytics.
-   **Netlify** hosts the site and processes standard request data (such as IP address and browser user agent) to serve it.
-   **GitHub** serves contributor avatars shown on community pages.

## 3\. Data Usage

-   **Verification:** To generate pass/fail reports on your Pull Requests and repositories.
-   **Audit Logs:** Verification results (not source code) are retained for 30 days to support audit trails, then permanently deleted.
-   **Improvements:** Aggregated, anonymized statistics (e.g., “errors blocked”) may be used to improve our verification engines. No individual code or user data is used.

## 4\. Data Protection

-   **Encryption:** All data in transit is encrypted with TLS.
-   **Access Control:** Strict internal access controls based on the principle of least privilege. All interactions pass through GitHub App authentication (JWT).
-   **Retention:** Verification metadata is retained for 30 days. Source code is never retained.

## 5\. Your Rights (GDPR / CCPA)

You have the following rights regarding your data:

-   **Access:** Request a copy of data we hold associated with your account.
-   **Deletion:** Request deletion of all metadata associated with your GitHub installation.
-   **Opt-out:** You may uninstall the GitHub App at any time to stop all data processing.

To exercise any of these rights, contact: [support@qwedai.com](mailto:support@qwedai.com)

## 6\. Cookies

Our website uses cookies solely for Google Analytics (anonymized, aggregated usage tracking), and only after you accept them in the cookie banner. Until you accept, no Google Analytics or Google Tag Manager code is loaded and no cookies are set. We do not use cookies for advertising or cross-site tracking.

-   **Change your choice:** use “Cookie settings” in the footer of any page. Withdrawing consent deletes the Google Analytics cookies already set.
-   **Global Privacy Control:** if your browser sends a Global Privacy Control signal, analytics stay off and the banner is not shown.
-   Your choice and your light/dark theme preference are stored in your browser’s local storage, not in cookies, and are never sent to us.

## 7\. Policy Changes

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date above. Continued use of the service after changes constitutes acceptance of the revised policy. For significant changes, we will notify users via the GitHub App or email where possible.

## 8\. Contact

For privacy-related inquiries: [support@qwedai.com](mailto:support@qwedai.com)